mcp-server-semgrep/semgrep-rules/generic/nginx/security/dynamic-proxy-host.conf

MCP Server for Semgrep Integration - static code analysis with AI

server {
  listen              443 ssl;
  server_name         www.example.com;
  keepalive_timeout   70;

  ssl_certificate     www.example.com.crt;
  ssl_certificate_key www.example.com.key;

  location ~ /proxy2/(.*)/(.*)/(.*)$ {
    # ruleid: dynamic-proxy-host
    proxy_pass $1://$2/$3;
  }

  location ~* ^/internal-proxy/(?<proxy_proto>https?)/(?<proxy_host>.*?)/(?<proxy_path>.*)$ {
    internal;

    # ruleid: dynamic-proxy-host
    proxy_pass $proxy_proto://$proxy_host/$proxy_path ;
    proxy_set_header Host $proxy_host;
}

  location ~ /proxy3/(.*)/(.*)/(.*)$ {
    # ruleid: dynamic-proxy-host
    proxy_pass http://$2/$3/$1;
  }

  location ~ /proxy4/(.*)/(.*)/(.*)$ {
    # ruleid: dynamic-proxy-host
    proxy_pass https://$1/$2/$3;
  }

  location ~ /proxy5/(.*)/(.*)/(.*)$ {
    # ok: dynamic-proxy-host
    proxy_pass http://blah.com/$3/$1;
  }

  location ~ /proxy6/(.*)/(.*)/(.*)$ {
    # ok: dynamic-proxy-host
    proxy_pass https://blah.com/$2/$3;
  }
}